Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier: /f7C3PaLalz8CewK9dO07/kZINiaWWbW9gTFGpgitVM=
Subject key identifier: 9B:50:C0:FD:80:FD:80:1E:8F:35:E4:71:C6:19:B7:EA:3D:31:64:27
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 01935275120B2D53EECC17C46DC7E5F532B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number: 0CCC
Signing time: Fri 22 Nov 2024 06:00:24 +0000
Manifest this update: Fri 22 Nov 2024 06:00:24 +0000
Manifest next update: Sat 23 Nov 2024 06:00:24 +0000
Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: 0Jb2wKyvE+he9BMbdsvzxqTeF5FWiQWWnCkXbVEOd/c=)
2: HYWZIyGDoqun4E7bPExTZPZqqWs.roa (hash: rNEMAU4LuGZ/eKnqTr896Ivt6keCIUWhfasO37uqnUY=)
3: P0LtbDaCQW7YxwH54chN34ifvek.roa (hash: RpLJzA101ya8uTlm2BjiUAqzHoySE1grOtqVBqsqCkQ=)
4: c7PThyo9x7ijnI6ZdV3MfxWyEt0.roa (hash: /DYVK9qmU8Wa3G1NhYBwKafvFDGHypV99xn8/8uGqqA=)
5: lOpLMmDWkVm6Uv-65iHg-tlLKnw.roa (hash: Atkq/x7/z0gk3dXhG2rqN3yDNhKOFbO7AuVZf8ADmuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:75:12:0b:2d:53:ee:cc:17:c4:6d:c7:e5:f5:32:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Nov 22 06:00:24 2024 GMT
Not After : Nov 23 06:00:24 2024 GMT
Subject: CN=9b50c0fd80fd801e8f35e471c619b7ea3d316427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:90:f5:73:78:42:a3:a5:46:62:64:83:6d:
b8:8e:c9:ff:2d:d8:2a:61:fd:38:09:d0:d3:a3:3e:
83:83:b7:92:21:81:00:d7:0c:4f:9a:08:21:6c:39:
95:29:e6:a3:53:35:7d:b3:1e:01:49:a9:ed:0e:fd:
7c:7f:6d:9c:a7:f0:43:78:b1:2e:61:98:10:45:33:
04:fc:12:ed:a9:78:c1:b7:ca:81:f1:f8:0b:41:89:
ab:dc:79:98:7e:ee:52:0b:5b:6c:72:98:f8:08:01:
b1:4f:ec:57:cb:3f:17:f0:7a:b1:30:9b:d5:c7:84:
59:15:24:dd:06:a9:70:7a:3b:be:86:43:d5:44:ae:
93:aa:dd:86:47:5a:23:86:ad:f4:96:9e:92:72:6c:
bb:4e:74:dc:14:10:cb:3c:91:ac:8b:f2:07:00:8a:
b5:1d:2d:0f:56:58:9d:ee:c7:3a:a0:58:f8:ef:61:
58:ee:7e:fa:04:0c:26:bb:1f:10:24:66:ae:a8:ac:
b3:aa:25:81:b6:58:ed:b9:54:0a:76:53:dd:99:b1:
8d:73:03:c6:7f:db:0c:c0:d1:c3:24:14:be:7d:eb:
04:29:24:77:30:75:c7:12:d6:23:55:cc:7b:cd:b7:
41:f0:37:63:64:79:f6:b4:77:e8:82:49:d9:18:c3:
eb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:C0:FD:80:FD:80:1E:8F:35:E4:71:C6:19:B7:EA:3D:31:64:27
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a4:8a:61:3b:4f:cb:e6:36:81:81:8b:90:5d:a3:9a:d7:dc:
a5:6b:46:cf:69:2e:a0:96:4a:88:c4:83:13:88:98:27:bf:0c:
0f:a0:24:df:ca:99:b5:8b:f6:f5:71:ec:86:57:e0:02:fd:fc:
72:c2:5c:79:47:fe:cf:c4:09:7f:80:71:e5:07:cf:69:e4:6c:
3a:9b:91:8e:31:6a:16:18:66:6c:c4:4d:32:51:1c:3b:c6:63:
2b:ac:27:be:55:be:d6:27:7f:f1:3b:7a:20:3b:81:05:77:0e:
0c:20:35:6e:d1:a3:21:39:17:c7:a5:2f:27:f8:fa:b6:f9:62:
09:97:28:27:e0:07:ac:17:74:09:a5:52:7e:07:64:a6:08:58:
2b:44:52:e4:5d:f8:7e:a4:a5:53:48:50:e6:8d:70:89:bc:48:
61:66:da:64:7b:e7:16:e9:d6:c3:f5:5d:eb:ec:a1:aa:fd:a3:
b5:6d:b9:cd:7b:0c:f2:7f:fe:84:b8:a0:2e:1d:08:0e:84:af:
b6:7e:62:94:9b:5d:1e:90:23:67:95:4c:9e:c9:56:8a:02:84:
21:17:a5:c6:8a:78:55:20:21:e0:b1:7a:99:8d:03:99:0d:93:
25:99:9f:33:7f:5b:8a:49:5b:0d:28:00:1d:f3:8b:38:8e:29:
05:92:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:33:19 2024 by rpki-client on console-fra.rpki-client.org